# Respond to a tax audit data request: runbook and evidence index

When a tax auditor asks for data, the clock starts. The request may name a file format, such as a national audit file, or simply ask for "the general ledger and sales invoices for the year". Either way you need to answer completely, on time, with data that agrees with the returns you filed, and without handing over more than was asked. A team that has never done it tends to lose days finding out who can run which export.

Part 2 of 3 in the series **Audit files and audits**. Read this first: [Produce and reconcile a SAF-T or tax audit file from your ERP](https://erplocalization.com/guides/produce-reconcile-saf-t-audit-file/). Next: [Chart of accounts, statutory journals and document numbering for a new country](https://erplocalization.com/guides/chart-of-accounts-statutory-journals-numbering/).

This runbook sets out the steps, the roles and an evidence index that records exactly what was delivered. It is written for the finance side. Your tax adviser decides the legal position, including what must be supplied and by when.

## Countries where a file is produced on request

In several countries the authority can ask for a standard audit file during an audit, rather than receiving it every period. The rows below come from this site's data; each links to the country row and its official source.

*Audit files produced on request listed on this site (17), from the [SAF-T](https://erplocalization.com/glossary/core/#core-saf-t) section data*

| Country | Audit file | Type | Status on this site |
|---|---|---|---|
| [Austria](https://erplocalization.com/austria/) | [Austrian SAF-T (optional accepted format)](https://erplocalization.com/austria/#req-at-audit-saf-t-at) | audit file – on request | verified |
| [Belgium](https://erplocalization.com/belgium/) | [Belgian SAF-T (recommended format, not yet mandatory)](https://erplocalization.com/belgium/#req-be-audit-be-saf-t) | audit file – on request | verified |
| [Denmark](https://erplocalization.com/denmark/) | [Bookkeeping-system SAF-T export](https://erplocalization.com/denmark/#req-dk-audit-saf-t) | audit file – on request | verified |
| [France](https://erplocalization.com/france/) | [Accounting entries file (audit file)](https://erplocalization.com/france/#req-fr-audit-fec) | audit file – on request | verified |
| [Germany](https://erplocalization.com/germany/) | [Tax-audit data access](https://erplocalization.com/germany/#req-de-audit-gobd) | audit file – on request | verified |
| [Ireland](https://erplocalization.com/ireland/) | [Electronic accounting data on request (no national audit-file schema)](https://erplocalization.com/ireland/#req-ie-audit-revenue-data) | audit file – on request | verified |
| [Israel](https://erplocalization.com/israel/) | [Open Format uniform accounting-data files](https://erplocalization.com/israel/#req-il-audit-open-format) | audit file – on request | unverified |
| [Kazakhstan](https://erplocalization.com/kazakhstan/) | [Standard audit file (voluntary, during tax audits)](https://erplocalization.com/kazakhstan/#req-kz-audit-standard-file) | audit file – on request | verified |
| [Lithuania](https://erplocalization.com/lithuania/) | [Lithuanian SAF-T via i.SAF-T](https://erplocalization.com/lithuania/#req-lt-audit-i-saf-t) | audit file – on request | verified |
| [Luxembourg](https://erplocalization.com/luxembourg/) | [Audit file (Fichier d'Audit Informatisé AED)](https://erplocalization.com/luxembourg/#req-lu-audit-faia) | audit file – on request | verified |
| [Netherlands](https://erplocalization.com/netherlands/) | [Financial audit file](https://erplocalization.com/netherlands/#req-nl-audit-xaf) | audit file – on request | verified |
| [Norway](https://erplocalization.com/norway/) | [Norwegian SAF-T Financial (accounting export)](https://erplocalization.com/norway/#req-no-audit-saf-t) | audit file – on request | verified |
| [Poland](https://erplocalization.com/poland/) | [On-request SAF-T structures](https://erplocalization.com/poland/#req-pl-audit-jpk-on-request) | audit file – on request | verified |
| [Portugal](https://erplocalization.com/portugal/) | [Portuguese SAF-T (accounting and invoicing export)](https://erplocalization.com/portugal/#req-pt-audit-saf-t-pt) | audit file – on request | verified |
| [Singapore](https://erplocalization.com/singapore/) | [IRAS audit file](https://erplocalization.com/singapore/#req-sg-audit-iaf) | audit file – on request | verified |
| [Ukraine](https://erplocalization.com/ukraine/) | [Ukrainian SAF-T (large taxpayers, on audit request)](https://erplocalization.com/ukraine/#req-ua-audit-saf-t-ua) | audit file – on request | verified |
| [United Arab Emirates](https://erplocalization.com/united-arab-emirates/) | [Tax audit file](https://erplocalization.com/united-arab-emirates/#req-ae-audit-faf) | audit file – on request | verified |

If your country is on the list, the format is known in advance. Test it before any request arrives; see [produce and reconcile an audit file](https://erplocalization.com/guides/produce-reconcile-saf-t-audit-file/). If it is not, the auditor may accept common formats or specify one in the request.

## Runbook

### 1. Log the request (day 0)

Record who sent it, the reference, the entities and periods covered, the data asked for, the format and the deadline. Forward it to the tax owner and the controller the same day. Ask the tax adviser whether the scope and deadline are as they appear.

### 2. Clarify scope (days 1–3)

If anything is unclear, ask the auditor in writing: which periods, which entities, which ledgers or documents, which format, what delivery channel. Write down the answers. Agree with the tax adviser whether to raise any concerns about scope.

### 3. Freeze and extract (days 2–7)

- Confirm the periods are closed. If not, record the date and time of extraction.
- Run the extracts or the audit file from the ERP, using the same settings each time.
- If data sits in other systems (a previous ERP, payroll, a webshop, an e-invoicing provider), extract it too and record the source. Old data after a migration is a common gap; see [ERP cutover and tax history](https://erplocalization.com/guides/erp-cutover-tax-history/).

### 4. Check before you send (days 5–10)

- The file validates against the format, if one was named.
- Totals tie out to the trial balance: opening, movements, closing.
- VAT totals agree with the returns filed for the same periods. If they do not, find out why before sending, and tell the tax adviser.
- Only the requested data is included. Remove unrelated entities, periods and personal data that was not asked for.

### 5. Deliver (by the deadline)

Use the channel the auditor named. Keep a copy of exactly what was sent, a checksum or file hash if practical, and the delivery confirmation.

### 6. Follow-up questions

Log every follow-up question as a new item in the index, with its own answer and evidence.

## Evidence index

The index is the single record of what was asked and what was given.

| # | Requested item | Period | Source system | File name | Records | Tie-out reference | Sent on | Channel | Confirmation |
|---|---|---|---|---|---|---|---|---|---|
| 1 | General ledger entries | FY | ERP | GL_FY.xml | 48,210 | TB-FY | 14 Mar | portal | receipt 7781 |
| 2 | Sales invoices | Q3 | ERP | SALES_Q3.csv | 3,120 | VAT-Q3 | 14 Mar | portal | receipt 7781 |
| 3 | Follow-up: credit notes over a set amount | Q3 | ERP | CN_Q3.pdf | 14 | VAT-Q3 | 21 Mar | email | reply 21 Mar |

## Sample case

An auditor asks a company for its ledger for one financial year in the national audit-file format, within the time stated in the letter. The company's on-request file was last tested a year ago. Since then, two journals were added. The test run fails the tie-out because the new journals are not mapped. The ERP owner maps them, the file is regenerated and ties out, and the controller notices that the year's output VAT in the file is 300 higher than the VAT returns (an illustrative figure). The cause is a credit note posted after the return for its period was filed. The tax adviser explains this in the cover letter, and the evidence index records the tie-out and the explanation. The lesson goes into the governance calendar: re-test the on-request file after every change to journals.

## Roles

| Step | Responsible | Accountable |
|---|---|---|
| Log and clarify | Controller | Tax owner |
| Extract | ERP owner | Controller |
| Check and tie out | Controller | Controller |
| Legal review and cover letter | Tax adviser | Tax owner |
| Deliver and index | Controller | Tax owner |

See [localization governance and RACI](https://erplocalization.com/guides/localization-governance-raci/) for how these roles fit the rest of the year.

## Worksheet

Use the [audit request runbook and evidence index](#template).

## Worksheet: Audit request runbook and evidence index

Copy this worksheet for each case. It records decisions and evidence; it does not determine the tax or legal treatment.
Show the worksheet

Use with the [tax audit data request guide](https://erplocalization.com/guides/respond-tax-audit-data-request/).

### Request

- Authority, auditor and reference:
- Received on; deadline:
- Entities and periods:
- Data and format requested:
- Delivery channel:
- Tax adviser informed on:

### Clarifications

| Question | Asked on | Answer | Answered on |
|---|---|---|---|

### Checks

- ☐ Periods closed, or extraction time recorded
- ☐ File validates against the named format
- ☐ Opening, movements and closing tie out to the trial balance
- ☐ VAT totals agree with filed returns, or differences explained
- ☐ Only requested data included

### Evidence index

| # | Requested item | Period | Source system | File name | Records | Tie-out reference | Sent on | Channel | Confirmation |
|---|---|---|---|---|---|---|---|---|---|

### Close

- Lessons and changes to the governance calendar:

**Sources checked:** 27 October 2026. On-request audit files come from the linked rows on this site, each with its official source. Response times and legal rights are not stated; they are set by the authority and the request.

## Related guides and data

Part 2 of 3 in the series **Audit files and audits**. Read this first: [Produce and reconcile a SAF-T or tax audit file from your ERP](https://erplocalization.com/guides/produce-reconcile-saf-t-audit-file/). Next: [Chart of accounts, statutory journals and document numbering for a new country](https://erplocalization.com/guides/chart-of-accounts-statutory-journals-numbering/).

- [Produce and reconcile a SAF-T or tax audit file from your ERP](https://erplocalization.com/guides/produce-reconcile-saf-t-audit-file/)
- [How to replace an ERP without losing tax-reporting history](https://erplocalization.com/guides/erp-cutover-tax-history/)
- [Localization governance: a RACI per obligation type and a review calendar](https://erplocalization.com/guides/localization-governance-raci/)

**Data on this site:** [SAF-T and audit files by country](https://erplocalization.com/saf-t/)

In [Accounting and reporting](https://erplocalization.com/guides/#accounting): previous [Chart of accounts, statutory journals and document numbering for a new country](https://erplocalization.com/guides/chart-of-accounts-statutory-journals-numbering/) · [Guides by task](https://erplocalization.com/guides/#by-task) · [All guides](https://erplocalization.com/guides/)

Vendor documentation is cited only as an example of the level of evidence to ask for; it is not a recommendation or a ranking. This guide is general information, not tax or legal advice. Checked 2026-10-27.

Related: [Glossary](https://erplocalization.com/glossary/) – abbreviations and terms used in these guides (SAF-T, Peppol, CTC, EN 16931, IFRS and more).

---
Canonical: https://erplocalization.com/guides/respond-tax-audit-data-request/ · Last updated: 2026-10-27 · Informational only; not tax, legal or implementation advice. Featured placements are paid or promotional and do not affect the compliance data. License: data CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/), attribution "ERP Localization (erplocalization.com)"; commercial use needs a paid commercial licence: https://erplocalization.com/data-licence/ (hello@erplocalization.com).
